Academic Integrity: tutoring, explanations, and feedback — we don’t complete graded work or submit on a student’s behalf.

1. What is a web bug? How does a web bug work? Discuss the benefits and security

ID: 3573001 • Letter: 1

Question

1.       What is a web bug? How does a web bug work? Discuss the benefits and security concerns of using web bugs.

2.       What is Clickjacking? How to prevent Clickjacking?

3.       Describe the vulnerability types in wireless networks and provide one example for each category.

4.       Finish the three demos provided by  https://static.googleusercontent.com/intl/sk/about/appsecurity/learning/xss/. You need to provide screenshots of your experiences. Discuss the similarities and differences between reflected and persistent(stored) XSS attacks.

5.       Using SQL inject attack to find one user name and password to log in to the page http://sqlzoo.net/hack/. Note that:  

a.        You need to find a specific user name and password other than Jack and Jack’s password.

b.       Please list all the commands you have used and screenshots after the execution of the commands. You will receive zero if you only show the results.

Explanation / Answer

Web Bug is like a graphics on a Web page or in an Email message. This is designed to monitor user behavior, that is who is reading the web page and Email messages. These Bugs are invisible because they are typically only 1-by-1 pixel in size. They are represented as HTML img tags

It can usually only be detected if the user looks at the source version of the page to find a tag that loads from a different Web server than the rest of the page.

Benefits of using web bus are like can track copyright violations on the Web.

Web bug can gather information like IP address, URL of the web bug, Type of the browser that web bug opened and cookie values.

Sometimes these web bugs are used by email spammers to validate email address. When a recipient opens an email message that includes a Web bug, information returned to the sender indicates that the message has been opened, which confirms that the email address is valid.